{"id":"ASB-A-176801033", "published":"2021-05-01T00:00:00Z", "modified":"2026-06-12T15:08:17.296522730Z", "aliases":["CVE-2021-0472", "A-176801033"], "details":"In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-05-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/26a90c2b820ba40755f9c28efaad2173133868b5"], "severity":"High", "spl":"2021-05-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["333206736053784449997950458316207344618", "177501676282529422575091223791797187624", "195623526685068679907378400787276389162", "8793843408600877299954437603954247770", "227176187817627969131496652035734614052", "292822901749107478384115330747627590133", "33476972354651022683635018391521878750", "199448010274548126106604302597564977362", "16410069294663650241074469509424729034", "3427055710480261165322600908100880180", "34684988134253483853347573803248605069", "285222174706486376030386267210185218243", "206908798015865156358514396576575361238", "116160001774032930655826964205071309215", "190860459215093907816863412950412546964", "154243755782907292700055415175132763430", "109204748140482433149491213881790762911", "76410927641618677596252496532218979994", "38541416400708422052910691037617107863"], "threshold":0.9}, "id":"ASB-A-176801033-1d9c6ed1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/26a90c2b820ba40755f9c28efaad2173133868b5", "target":{"file":"services/core/java/com/android/server/am/LockTaskController.java"}}, {"deprecated":false, "digest":{"function_hash":"201055512508727973607262584861113119280", "length":343}, "id":"ASB-A-176801033-62b46a74", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/26a90c2b820ba40755f9c28efaad2173133868b5", "target":{"file":"services/core/java/com/android/server/am/LockTaskController.java", "function":"shouldLockKeyguard"}}, {"deprecated":false, "digest":{"function_hash":"108825034237750492749678710967939808094", "length":166}, "id":"ASB-A-176801033-6f673b72", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/26a90c2b820ba40755f9c28efaad2173133868b5", "target":{"file":"services/core/java/com/android/server/am/LockTaskController.java", "function":"lockKeyguardIfNeeded"}}, {"deprecated":false, "digest":{"function_hash":"103792366027275352106326334034155196847", "length":540}, "id":"ASB-A-176801033-ce990c1a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/26a90c2b820ba40755f9c28efaad2173133868b5", "target":{"file":"services/core/java/com/android/server/am/LockTaskController.java", "function":"performStopLockTask"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-05-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bb4eded37926916f8f9c45dede6bc6315cf15b18"], "severity":"High", "spl":"2021-05-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"201055512508727973607262584861113119280", "length":343}, "id":"ASB-A-176801033-0965656c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb4eded37926916f8f9c45dede6bc6315cf15b18", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java", "function":"shouldLockKeyguard"}}, {"deprecated":false, "digest":{"function_hash":"108825034237750492749678710967939808094", "length":166}, "id":"ASB-A-176801033-12172b95", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb4eded37926916f8f9c45dede6bc6315cf15b18", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java", "function":"lockKeyguardIfNeeded"}}, {"deprecated":false, "digest":{"line_hashes":["333206736053784449997950458316207344618", "177501676282529422575091223791797187624", "195623526685068679907378400787276389162", "8793843408600877299954437603954247770", "157724621926064235821062892275194029529", "292822901749107478384115330747627590133", "33476972354651022683635018391521878750", "199448010274548126106604302597564977362", "16410069294663650241074469509424729034", "3427055710480261165322600908100880180", "34684988134253483853347573803248605069", "285222174706486376030386267210185218243", "206908798015865156358514396576575361238", "116160001774032930655826964205071309215", "190860459215093907816863412950412546964", "154243755782907292700055415175132763430", "109204748140482433149491213881790762911", "76410927641618677596252496532218979994", "38541416400708422052910691037617107863"], "threshold":0.9}, "id":"ASB-A-176801033-57ae3c31", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb4eded37926916f8f9c45dede6bc6315cf15b18", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java"}}, {"deprecated":false, "digest":{"function_hash":"103792366027275352106326334034155196847", "length":540}, "id":"ASB-A-176801033-caad4831", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb4eded37926916f8f9c45dede6bc6315cf15b18", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java", "function":"performStopLockTask"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-05-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7a974a5468b8760daeae1890a9c8c52eeed19d87"], "severity":"High", "spl":"2021-05-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"283440389493530536439999781748583463681", "length":534}, "id":"ASB-A-176801033-30d5f371", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7a974a5468b8760daeae1890a9c8c52eeed19d87", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java", "function":"performStopLockTask"}}, {"deprecated":false, "digest":{"line_hashes":["28263170677722799021350252788901767036", "260414619764934154283058983224203389993", "220200691912143438853125641529135494693", "8793843408600877299954437603954247770", "157724621926064235821062892275194029529", "292822901749107478384115330747627590133", "33476972354651022683635018391521878750", "199448010274548126106604302597564977362", "16410069294663650241074469509424729034", "3427055710480261165322600908100880180", "34684988134253483853347573803248605069", "285222174706486376030386267210185218243", "206908798015865156358514396576575361238", "116160001774032930655826964205071309215", "190860459215093907816863412950412546964", "154243755782907292700055415175132763430", "109204748140482433149491213881790762911", "76410927641618677596252496532218979994", "38541416400708422052910691037617107863"], "threshold":0.9}, "id":"ASB-A-176801033-57cc0444", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7a974a5468b8760daeae1890a9c8c52eeed19d87", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java"}}, {"deprecated":false, "digest":{"function_hash":"201055512508727973607262584861113119280", "length":343}, "id":"ASB-A-176801033-d89fc19e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7a974a5468b8760daeae1890a9c8c52eeed19d87", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java", "function":"shouldLockKeyguard"}}, {"deprecated":false, "digest":{"function_hash":"108825034237750492749678710967939808094", "length":166}, "id":"ASB-A-176801033-e2bbce40", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7a974a5468b8760daeae1890a9c8c52eeed19d87", "target":{"file":"services/core/java/com/android/server/wm/LockTaskController.java", "function":"lockKeyguardIfNeeded"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-05-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/c90fb352cdaab0fd5adaa8957694b726045c673c"}]}